A security professional is asked to perform an analysis of the current state of a company network. What tool would the security professional use to scan the network only for security risks?